Privacy Policy
We take the responsibility of looking after your personal information seriously, and value you as a customer. This information is laid out for you so you understand how and where we store your data and what we use it for, so please read this privacy policy carefully to understand how we do this.
For the purposes of this policy, IRIS FASHION LTD is the Data Controller. The policy has been updated to incorporate the General Data Protection Regulations 2018 (GDPR) and we are committed to protecting your privacy in accordance with this legislation and any other relevant legislation.

What type of information do we collect?
You can browse our website without being asked to provide any personal information, but we do require a certain amount of information from you to allow us to fulfil your order, answer your queries and offer you the best possible shopping experience.
We only ever ask you to provide the minimum required personal information to allow us to do that including your name, address (including delivery address, if different), email and telephone number. We ask you for payment card details in order to process payment for your order, but we do not store this information within our system.
In addition to this, we also use web analytics tools when you browse the website that may record things like your IP address, browser type, browser plug-ins, operating system, time zone settings etc. If you make a purchase from IRIS, we record details of any transactions you have made, including the products (or services) you have bought from us, and to make it easier for you to use the website we use cookies, which record data about the pages you browse and the products you add to basket.
We do not knowingly collect or store any inforamtion that is categorised as sensitive under the terms of the GDPR, including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life or sexual orientation, and genetic and/or biometric data.

How do we use the information?
We use this information to provide you with the products and services we offer and to make your shopping experience easier and more specific your preferences.
This means:
o Processing your order
o Keeping you up-to-date on what’s happening at IRIS
o Improving our products and services

We do this on the basis that it is necessary to fulfil our contract with you or to meet our legitimate business interests (where of course they don’t compete with your rights).
Contractual necessity, for instance, includes identifying you, responding to enquiries you may have, providing requested services (including processing orders and refunds), allowing you to register and set up an account on our website etc.
Legitimate interest includes fraud prevention, website security, personalising your online experience, allowing you to leave reviews, add items to your wish list and keep you informed of new collections, promotions, in-store events or anything IRIS related we think you may be interested in.
You have the right to withhold your personal information or request that we not process it. (See more about your rights below.) However, that may result in us not being able to provide products and services to you or our service being significantly impaired.
In addition, we may be required to process your personal data for legal reasons -(legal compliance)

Do we share this information with any third parties?
We have to share your personal information with a number of third parties to allow us to provide the services we do.
For instance, processing your order involves sharing information with our payment service providers (who process the payment), our delivery company provider (who deliver the order to you)
Keeping you up-to-date regarding new collections etc. involves sharing your information with our data marketing agency) and our email service provider (who we use to send out the marketing emails), plus we use digital marketing networks, specific services (like Google and Facebook Custom Audiences) and various advertising partners to ensure we only show you adverts that are relevant to you.
Analysing sales and customer behaviour involves sharing information with our data marketing agency, as well as technology providers who help us understand how we can provide you with better products and a better service.
if you have indicated that you are happy to receive catalogues from like-minded brands, we will also share your information with data co-operatives.
In all instances, we share only the minimum information required and we have agreements in place with all these partners to ensure that they treat your personal information with the same care that we treat it.

What communication will you receive from us after you place an order?
We will ordinarily send you an email confirming the order; a further email when the order has been despatched; and, if you return any part of the order, an email confirming that you have been refunded.

Will you receive marketing communications from us?
We would like to contact you by email and/or by post (in the form of a catalogue) to show you our new collections, let you know about promotions, offer styling advice and to let you know about events etc.
When you place an order with us, therefore, you should expect to receive marketing emails and catalogues from us unless you opt out at the point of creating an account or during the checkout process.
However, you have the right at any stage to change your mind and unsubscribe (or resubscribe if you wish). Please see below for details.

How can you unsubscribe from marketing communications?
If you no longer wish to receive marketing communications from IRIS, we make it as easy as possible for you to unsubscribe.
Every marketing email we send out has an unsubscribe link at the bottom.
If you are a registered user of our website, you can also log in to your account and adjust your marketing preferences.
Alternatively, you can email us directly at customercare@irisfashion.co.uk to let us know what marketing communications you do want to receive.

How can you find out what information about you we hold?
As part of the new regulation, you have the right to know what personal data we hold and how it is being processed.
You should make any request by email to customercare@irisfashon.co.uk or in writing to:

Data Care
IRIS FASHION
141 Greyhound Rd
W6 8NJ

We will provide the following information within 30 days of the request:
o Confirmation of what personal data we hold about you and where it is held;
o A copy of the data;
o Any supporting documentation

Can you request your personal information be provided in a certain format? (Right of portability)
In addition to the above right of access, you can normally ask us to provide a copy of any information in a commonly used format.

Can you ask to have your personal information deleted? (Right to be forgotten)
You have the right to ask us to remove any personal information that you no longer want us to hold (unless we are required by law to retain it).
You should make any request by email to customercare@irisfashion.co.uk (or by post to the above address).
We will delete or make anonymous any information that is stored by us (or by any third party who processes the data on our behalf).
However, please note that we can only do this when an order is complete and, after your data has been deleted, we will not be able to identify you, so we cannot accept any returns or answer questions around previous orders or any other information about you

How can you correct personal information that is inaccurate? (Right of rectification)
You should make any request by email to customercare@irisfashion.co.uk (or by post to the above address), specifying what information you believe to be incorrect and what the correct information is.

Please note that in all the above instances we will ask you to provide proof of your identity to ensure that you are the owner of the personal information in question. We reserve the right not to comply with the request if we are not satisfied that the proof of identity provided.

How long do we keep your personal information?
We keep your information on our databases until you ask us to delete it or for as long as it is relevant to IRIS. That means we will delete it if you have not interacted with us for a while and we believe you have no intention of doing so in the future.
The exact time period for this is kept under constant review.

How is this information stored and transmitted?
We have measures in place to restrict access to your data, to maintain data integrity and to prevent data loss.
Data can only be accessed or processed by employees of IRIS or third parties with whom we have appropriate contractual arrangements.
We use technologies like SSL, password protection and encryption to ensure that it is stored and transmitted securely.
And we regularly review all procedures, including how – and how much - information is stored in order to minimise any risk.

However, while we will always do our best to keep your data secure, we cannot completely guarantee the security of data transmitted to us. For instance, if you use a password to access your account online, please make sure you keep the password to yourself and do not disclose it to anyone else.